rpms / selinux-policy

Clone
Source Code
GIT

Commits 3005

c10s-sig-hyperscale c4 c5 c5-plus c6 c6-plus c7 c7-alt c7-atomic c7-beta c8 c8-beta c8s c8s-sig-hyperscale c9 c9-beta c9s-sig-hyperscale
Add vnstat policy
Dan Walsh • 14 years ago  
0a394b
Fixes for cluster policy
Miroslav Grepl • 14 years ago  
be5142
Merge upstream
Dan Walsh • 14 years ago  
14ffaf
Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy
Dan Walsh • 14 years ago  
a55bb5
This is a role capability.
Dominick Grift • 14 years ago  
9c9e4c
Whitespace, newline and tab fixes.
Dominick Grift • 14 years ago  
0dacd0
Requires system_r role.
Dominick Grift • 14 years ago  
23ac31
Replace type and attributes statements by comma delimiters where possible.
Dominick Grift • 14 years ago  
2f94f4
Use ps_process_pattern to read state.
Dominick Grift • 14 years ago  
2de234
The ps_process_pattern includes permission to get attributes of target domain.
Dominick Grift • 14 years ago  
819518
Whitespace, newline and tab fixes.
Dominick Grift • 14 years ago  
dcf874
Use permission sets where possible.
Dominick Grift • 14 years ago  
59c034
Redundant: mta_sendmail_domtrans calls domtrans_pattern which already includes these permissions.
Dominick Grift • 14 years ago  
ba6db0
XML summary ffixes.
Dominick Grift • 14 years ago  
b35d25
Search parent directory to be able to interact with target content.
Dominick Grift • 14 years ago  
f92662
Allow users to ptrace and send any kind of signal to spamassassin agents.
Dominick Grift • 14 years ago  
4ff4dd
This type is not required here.
Dominick Grift • 14 years ago  
c5cadd
This is not a role capability.
Dominick Grift • 14 years ago  
b0e9aa
Use relabel permission sets where possible.
Dominick Grift • 14 years ago  
a3d20a
Redundant: This is included with userdom_read_user_home_content_files.
Dominick Grift • 14 years ago  
9a2fd7
Allow users to ptrace and send any kind of signal to their ssh agent instead of only a generic signal.
Dominick Grift • 14 years ago  
50e857
Redundant: This is included with userdom_search_user_home_content.
Dominick Grift • 14 years ago  
f416df
Redundant: domtrans_pattern includes these.
Dominick Grift • 14 years ago  
a87e8f
Do not audit interface should not provide permission to read parent directories.
Dominick Grift • 14 years ago  
d0b756
Use domtrans_pattern because it include permission the sigchld target domain and other required access to domain transition.
Dominick Grift • 14 years ago  
5ebd1a
Whitespace, newline and tab fixes.
Dominick Grift • 14 years ago  
2d102f
Tunable, optional, if(n)def block go below.
Dominick Grift • 14 years ago  
60d27b
Use stream_connect_pattern.
Dominick Grift • 14 years ago  
2e2a24
Merge branch 'master' of ssh://git.fedorahosted.org/git/selinux-policy
Dan Walsh • 14 years ago  
4d71bc
Use relabel permission sets where possible.
Dominick Grift • 14 years ago  
83029f
Add missing admin_patterns to rpcbind_admin.
Dominick Grift • 14 years ago  
4ec4a4
Use stream connect pattern.
Dominick Grift • 14 years ago  
ac13ad
Use ps_process_pattern to read state.
Dominick Grift • 14 years ago  
ad4245
Reduntant: Is already included with userdom_search_user_home_dirs.
Dominick Grift • 14 years ago  
87cd6e
Access to get attributes of target pppd_t domain is included with ps_process_pattern.
Dominick Grift • 14 years ago  
4eaffd
Use ps_process_pattern to read state. Access to get attributes of target afs_t domain is included with ps_process_pattern.
Dominick Grift • 14 years ago  
39e118
Allow pads_admin to search parent directories to be able to interact with pads content.
Dominick Grift • 14 years ago  
1215df
XML summary fix.
Dominick Grift • 14 years ago  
d18313
Access to get attributes of target accountsd_t domain is included with ps_process_pattern.
Dominick Grift • 14 years ago  
dcbbee
Use admin_pattern. Allow nslcd_admin to search parent directories to be able to interact with nslcd content.
Dominick Grift • 14 years ago  
b6d0a7
Source is required to search generic pid directories to be able to interact with mysql sockets in var_run.
Dominick Grift • 14 years ago  
eb12bc
Use the stream_connect_pattern.
Dominick Grift • 14 years ago  
f386b9
Allow mpd_admin to manage mpd tmpfs content.
Dominick Grift • 14 years ago  
c5e7db
Source is required to search generic tmpfs directories to be able to interact with mpd tmpfs content.
Dominick Grift • 14 years ago  
0ba923
Redundant: mpd_search_lib already includes files_search_var_lib.
Dominick Grift • 14 years ago  
0ab415
Memcached_admin is required to search generic pid directories to be able to manage memcached pid content.
Dominick Grift • 14 years ago  
7d3493
Allow icecast_admin to ptrace and signal the icecast_t domain.
Dominick Grift • 14 years ago  
aa5baa
This is redundant since base user can search generic proc directories and included ps_process_pattern call permits all else.
Dominick Grift • 14 years ago  
4b81a5
Permission to search proc_t directories is required to be able to read abrt state.
Dominick Grift • 14 years ago  
7d36c9
Permit fetchmail_admin to ptrace and signal the fetchmail_t domain.
Dominick Grift • 14 years ago  
b36824
Replace some type statements by comma delimiters.
Dominick Grift • 14 years ago  
cf152b

Powered by Pagure 5.14.1

SSH Hostkey/Fingerprint | Documentation